CVE-2012-4548: Undefined Security Weakness

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command...

update for cgit (important)

Specially-crafted commits could trigger a heap-based buffer overflow...

update for cgit (important)

Specially-crafted commits could trigger a heap-based buffer overflow...

CVE-2012-4465

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

CVE-2012-4465

CVE-2012-4465 affects cgit up to version 0.9.0.3, where a heap-based buffer overflow in substr in parsing.c can be triggered by an empty Author field in a commit. This allows remote authenticated users to cause a crash and potentially execute arbitrary code. The vulnerability has been addressed i...

CVE-2012-4465

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

CVE-2012-4465: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

Fedora 16 : systemd-37-15.fc16 (2012-2557)

This systemd update adds several fixes : - logind created files under /run/user/ in an insecure manner. A local attacker could create a symlink inside arbitrary directories CVE-2012-0871. - permissions of PrivateTmp directories RHBZ790522 - timedated did not run without ntp installed RHBZ790260 -...

Fedora Update for cgit FEDORA-2011-9589

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-9589 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cgit FEDORA-2011-9588

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-9588 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cgit FEDORA-2011-9589

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cgit FEDORA-2011-9588

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: cgit-0.9.0.2-2.fc15

Cgit is a fast web interface for git. It uses caching to increase performa nce...

[SECURITY] Fedora 14 Update: cgit-0.9.0.2-2.fc14

Cgit is a fast web interface for git. It uses caching to increase performa nce...

Fedora 14 : cgit-0.9.0.2-2.fc14 (2011-9588)

This update fixes a potential XSS vulnerability. A malicious user would need push access to the git server in order to exploit this issue. Refer to the cgit mailing list for : Numerous minor bugs are also fixed. For details, refer to the upstream release announcements for 0.9.0.1 and 0.9.0.2...

Fedora 15 : cgit-0.9.0.2-2.fc15 (2011-9589)

This update fixes a potential XSS vulnerability. A malicious user would need push access to the git server in order to exploit this issue. Refer to the cgit mailing list for : Numerous minor bugs are also fixed. For details, refer to the upstream release announcements for 0.9.0.1 and 0.9.0.2...

CVE-2011-2711

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...

Cross site scripting

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...

CVE-2011-2711

CVE-2011-2711 affects cgit ≤0.9.0.2: XSS in print_fileinfo (ui-diff.c) allows remote authenticated users to inject script/HTML via the filename in a rename hint. Documented across multiple sources (SUSE/Fedora updates) indicating patches exist in cgit upgrades (e.g., OpenSUSE/SU-2011:0891-1, Fedo...

CVE-2011-2711

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...